Skip to main content

Jboss Web Server

3 CVEs product

Monthly

CVE-2021-4104 Dec 14, 12:15 Maven HIGH Act Now

JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. Epss exploitation probability 72.2% and no vendor patch available.

RCE Apache Deserialization Oracle Red Hat +47
NVD GitHub VulDB
CVSS 3.1
7.5
EPSS
72.2%
CVE-2016-2183 Sep 01, 00:59 HIGH POC PATCH THREAT Act Now

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 37.8%.

Python Information Disclosure Node.js OpenSSL Cisco +9
NVD GitHub Exploit-DB VulDB
CVSS 3.1
7.5
EPSS
37.8%
Threat
4.1
CVE-2016-5387 Jul 19, 02:00 HIGH PATCH Act Now

The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable,. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Epss exploitation probability 60.3%.

Apache Information Disclosure Linux Debian Oracle +24
NVD
CVSS 3.1
8.1
EPSS
60.3%
EPSS 72% CVSS 7.5
HIGH Act Now

JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. Epss exploitation probability 72.2% and no vendor patch available.

RCE Apache Deserialization +49
NVD GitHub VulDB
EPSS 38% 4.1 CVSS 7.5
HIGH POC PATCH THREAT Act Now

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 37.8%.

Python Information Disclosure Node.js +11
NVD GitHub Exploit-DB VulDB
EPSS 60% CVSS 8.1
HIGH PATCH Act Now

The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable,. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Epss exploitation probability 60.3%.

Apache Information Disclosure Linux +26
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy